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Abstract 

We present a unique decoding algorithm of algebraic geometry codes on plane curves, Hermitian codes in 
particular, from an interpolation point of view. The algorithm successfully corrects errors of weight up to half of 
the order bound on the minimum distance of the AG code. The decoding algorithm is the first to combine some 
features of the interpolation based list decoding with the performance of the syndrome decoding with majority voting 
scheme. The regular structure of the algorithm allows a straightforward parallel implementation. 



Index Terms 

y—i Algebraic geometry codes, interpolation decoding, Grobner bases. 

o 

^ I. Introduction 

Unique decoding of algebraic geometry codes is now a classical subject. By the works of Justesen et al., 
Q Skorobogatov and VladuJ, and many others, the paradigm of decoding via syndromes using error locator polynomials 
^ and evaluator polynomials is well established [1|. Enhanced by Feng and Rao's majority voting, the syndrome 
^ decoding algorithm for AG codes is capable of correcting errors up to half of the Feng-Rao bound, also called the 
order bound, which is no less than the designed distance. Until the advent of Guruswami and Sudan's list decoding 
^ I algorithm based on interpolation [2|, the syndrome decoding algorithm had long been a uniquely available algorithm 
l-H for decoding AG codes. Since then, the superiority in decoding performance of the list decoding algorithm has 
c/3 somewhat faded the syndrome decoding algorithm. 

i The superior performance of the list decoding is gained at the expense of large computational complexity. Table 

[T] below, excerpted from [3], shows an experimental result about the performance of the list decoding algorithm 
for the Hermitian code of length 27 and dimension 14. Here r denotes the number of errors that the list decoder 
y—{ is guaranteed to correct with multiplicity parameter m, and the number of successful decodings was counted out 
^ of 10,000 random error vectors of weight t. The notation cxd is used when successful decoding is guaranteed, as 
\^ t < T. We may compare the result with the decoding performance of the syndrome decoding algorithm, which can 
^ correct errors of weight half of the designed distance, that is, 5 in this case. The list decoding algorithm certainly 
has better performance because, with multiplicity parameter 25, it can decode up to 6 errors, though the increased 
^ complexity is prohibitively high. 

Moreover note that, to match the performance of the syndrome decoding algorithm, that is, to be guaranteed 
• ^ for successful decoding up to 5 errors, the multiplicity parameter should be at least 5. This means, for the 
^ same performance, the list decoding algorithm suffers slow decoding speed. On the other hand, observe from 
^ the experiment that list decoding with multiplicity m = 1 performs almost as well as syndrome decoding. It 
corrects most cases of 5 errors, but uirfortunately misses some. Since successful decoding only up to 2 errors is 
guaranteed by the theory of list decoding, this is a much better performance than expected. 

Beside the performance, the two kinds of decoding algorithms, one based on interpolation and the other on 
syndromes, have different features. The list decoding algorithm decodes in the primal AG code, whose codeword 
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is obtained by evaluation at rational points of the base curve, while the syndrome decoding algorithm decodes 
in the dual code. The former computes the message directly from the so-called Q-polynomial, while the latter 
obtains the message after computing the error locations and the error values from the error locator and evaluator 
polynomials. Finally, the syndrome decoding algorithm is equipped with the majority-voting scheme while there is 
no corresponding mechanism for list decoding. 

These observations lead to the view, already widely accepted to experts in this area, that the list decoder with 
multiplicity one is closely related to the syndrome decoding algorithm without majority voting enhancement. 
However, they cannot be equivalent, principally due to the fact that one algorithm is for the primal code while the 
other one is for the dual code. Hence there is a missing idea corresponding to the majority voting in the context 
of interpolation based decoding, to match up the performance of the syndrome decoding algorithm. In this paper, 
we present an interpolation based unique decoding algorithm capable of correcting up to half of the order bound. 
The algorithm is an amalgamation of the decoding algorithm with multiplicity one and list size one in fSj and a 
recursion procedure that resembles the majority voting of Duursma fT|. Like list decoding, our unique decoding 
algorithm decodes in the primal codes and computes the message directly from the received vector. Like Kotter's 
algorithm [5 |, it allows an efficient parallel implementation. 

In Section |llj we review basic concepts and establish notations regarding AG codes on plane algebraic curves. 
We refer the reader to ||6l, Q, IHl for the basic theory of algebraic curves and AG codes over finite fields, and ||9l . 



llTOl for Grobner bases and commutative algebra. In Section III we present and prove a unique decoding algorithm, 
using a majority voting procedure as a fundamental decoding method. In Section IV we give a decoding example 
of Hermitian codes. In Section fVl we conclude with brief remarks. 



II. Preliminaries 

Let X be an irreducible plane curve defined by the equation E{x, y) = over a field F where 

E{x, y) = y''+ Cijx'y^ + cx^ 

ai+bj<ab 

with gcd(a,6) = 1 and / c G F. These curves are known as Miura-Kamiya curves in the literature ifTTl . It is 
well known that X has a unique point Poo at infinity that is either nonsingular or a cusp. Hence there is a unique 
valuation vp^ associated with Pqo- Let 6{f) = —vp^{f) for / in the coordinate ring R of X. Let 6x = 6{x) = a 
and Sy = 5{y) = h. By the equation of the curve, the ring R = F[x, y] is a free module over F[x] of rank a with 
basis {y^ | < j < a}. The semigroup of R at Pqo 

S = {5{f) \feR] = {i5x+j5y I < f,0 < j < a} 

is a subset of the Weierstrass semigroup at Pqo- For each nongap s E 5", there is a unique monomial x'^y^ E R 
with < j < a such that 6{x'^y^) = s. Let us denote the monomial by cps- 

Let P = P2, • • • 7 -fra} be a set of nonsingular affine rational points of X and let F" be the Hamming space 
over F. The evaluation ev : i? — F" defined by tp {ip{Pi), ip{P2), • • • , ip{Pn)) is a linear map over F. Let u be 
a fixed positive integer less than n and define 

Lu = {f € R \ 5{f) <u} = {^seR\s€S,s<u) 

where brackets denote the linear span over F. Then the AG code Cu is defined as the image of under ev. As 
u < 11, the evaluation is one-to-one on Lu- Therefore the dimension k of the code Cu equals dimp L„, which equals 
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the size of the set {s G S | s < u}. Let {s G S | s < u} = {si, S2, . • • , Sfe}. By nonsystematic encoding, a message 

m = (mi,m2, . . ■,mk) G F'^ 
is encoded to the codeword ev(/Lt) G C„ where 

k 

For each 1 < i < n, let tTij = (a; — aj, y — be the maximal ideal of R associated with the point Pi = (oj, 
Then we have 

mj + JJmj = (1). 

Therefore there exist gi and hi such that 

gi + hi = 1, 5i G trii, /ti G J]^ mj. 

Then hi{Pi) = 1 and hi{Pj) = for j i. This set of hi is called a Lagrange basis for the points Pi, ... , P„. 
A Lagrange basis can be easily computed as follows. Let t be the number of distinct x-coordinates of the points 
Pi. For each of these x-coordinates, there are at most a y-coordinates of the points with the same a;-coordinate. If 
hi,x G ¥[x] and hi^y G ¥[y] are polynomials such that hi^x vanishes at the x-coordinates except that of Pi and hi^y 
vanishes at the y-coordinates except that of Pi, then let 



hi,x{a'i)hi^y{l3i) 

Note that dcg,^{hi^xhi,y) = t — I. We assume hi are precomputed prior to decoding. 

As R is an F[x]-module of rank a with free basis {y^ | < j < a}, a polynomial in R[z] can be written as a 
unique F-linear combination of the monomials in 

n = {x'yh^ I < i, < J < a, < A;}. 

For an integer s, we define the weighted degee of a monomial x^y^ G O by 

5s{x''y^z^) = 5{x'y^) + sk = 6xi + Syj + sk. 

Using Ss, we endow a weighted degree order >s on $7, breaking ties in weighted degrees by z > y > x. Note that 
>s restricted to the monomials belonging to Rz ® R is a monomial order for F[a;] -modules. The weighted degree 
order restricted to R is simply denoted by >5 as it is independent of s. 

Note that Rz © i? is a free F[a;]-module of rank 2a with a free basis G = {y^z,y^ | < j < a}. There is a 
simple criterion of a Grobner basis of an F[a;]-submodule of Rz® R with respect to any monomial order. 

Proposition 1. Let M be a submodule of Rz © R, and let > be a monomial order on Rz © R. Suppose B is a 
subset of M that generates M. If elements of B have leading terms that are ¥[x]-multiples of distinct elements of 
G, then B is a Grobner basis of M with respect to >. If this is the case, B is also a free basis of M. 

For a polynomial tp, lt((^) denotes the leading term with respect to a given monomial order, and \c{ip) denotes 
the coefficient of the leading term. Finally, for / G F[x] the bracket notation /[x*^] refers to the coefficient of the 
term x^ in /. 
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III. Interpolation Decoding 
Let u be a received vector in F". Let c G be such that v = e + c. Then there is a unique 

s(^S,s<u 

with c = ev(/i). 

Let us denote the module of z-Iinear polynomials over R that interpolate the points {Pi,Vi) by 

h = {f eRz(BR \ fiPi, v^) = 0,l<i< n}. 
Then it is easy to see that 1^ = R{z — hy) + J where 

n n 
1=1 i=l 

As J is an ideal of i?, J is a free F[a;]-submodule of R of rank a and has a Grobner basis {?7o,??i, • • • jVa-i} 
with respect to >s such that degy{lt{r]i)) = i. Then 

y] deg^{\t{r]i)) = dimpR/J = n. (1) 

0<i<a 

As = R{z — hy) + J, the set 

{%,??!, . . . ,r/a_i,2: - K,y{z - hy), . . .,y°-~^{z - hy)} (2) 

is a Grobner basis of ly with respect to >s{h^)- 
The ideal of the error vector e 

Je = Pi mi 

also has a Grobner basis {eo, ei, • • • , Ca-i} with respect to >s such that degy{lt{ei)) = i. Then 

degjlt(ei)) = diniF R/J^ = wt(e). (3) 

0<i<a 



Section III-B and its proof in Section III-C 



The results in the following Section III-A will serve as a backbone of our decoding algorithm presented in 



A. Decoding by Majority Voting 

Let s be a nongap with s < u. Suppose 

and B^'^i = {gf \ f^'Uo<i< a} is a Grobner basis of Iy(s) with respect to >s where 

= XI '^hjy^^+ XI ^ijy^^ Cij,dij e¥[x], 

0<j<a 0<j<a 
0<j<a 0<j<a 

such that lt(5f = lt((ij,iy*) and lt(/^''^) = lt{ai^iy'z) for < i < a. Let ^ = lc(di,i). 
Lemma 2. We have 

X deg(ai,j) + X deg(di,i) = n. 

0<i<a 0<j<a 

Proof: As is a Grobner basis of Iy(s), 

X deg(ai,i) + X deg(dj,i) = dimF(i?z ® 

0<i<a 0<i<a 
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Since /^(s) = R{z — + J, we have diuif {Rz © R)/IyU) = diniF R/J = n. □ 

Lemma 3. For Q < i < a, we have 6{ai^iy^) < S{ei), equivalently deg(ai,i) < deg3,(lt(ei)). 

Proof: Since Je{z — ji^^^) C I^m, we have ei{z — ix^^^) G /„(s). Note that lt(ei(z — /Li^^^)) = It(eiz) with respect 
to >s, and degy{eiz) = i. As B*^*) is a Grobner basis of I^is), the leading term It(eiz) must be an F[x]-multiple of 
lt{f^^^). Thus the assertion follows. □ 

Lemma 4. For < i < a, we have 6{di^iy^) < 5{r)i), equivalently deg(di,i) < degj.(lt(?7j)). 

Proof: As B^^^^ is a Grrobner basis of /^(.) and J C Iy(s), it follows that r/j is an F[x]-multiple of lt{g^^^). 
Hence the assertion follows. □ 
Now let w be any element of F. For each < i < a, let 

9i = 9i^^ {z + Wips), fi = /f^-' {z + wifs) 

where the parentheses denote substitution of the variable z. The automorphism of the ring R[z] induced by the 
substitution z ^ z + wips preserves leading terms with respect to >s. Therefore the set B = {gi, fi\0<i<a} 
is a Gr5bner basis of 

i={f{z + w^ps) I / G 4w} 

with respect to >s. However, with respect to >s-i, B is generally no longer a Grobner basis of /. The following 
procedure modifies B to obtain a Grobner basis of / with respect to >s_i. 

For each <i < a, there are unique integers < i' < a = Sx and ki satisfying 

^{ai,iy') + s = Sxh + dyi'. (4) 

Then let 

Ci = degj.{di' ^i') - ki, Ci = maxjcj, 0} (5) 
and ^ 

bi i'[x '] , i \ 

Wi = , iJ,i = lc(ai,iy ifs). (6) 

Note that the map i i' is a permutation of {0,l,...,a — 1} and that the integer Cj is defined such that 

SxCi = 6{di'^i'y'') - 5{ai^iy') - s. (7) 



Now if Wi = w, let 
and if Wi ^ w and Cj > 0, let 

and if Wi ^ w and Cj < 0, let 



9i'=gi', fi = fi (8) 



gi' = fi, fi = x^'fi — Qi' (9) 



7 f fiiiw-Wi) 

9i'=9i', fi = Ji 7-^ X 'gi'. (10) 



Proposition 5. The set B = {gi, fi\0 <i < a} is a Grobner basis of I with respect to >s-i. 
Proof: Let < i < a. We consider the pair 

gi' = ^i'du'^ + ^'''^y^ + XI ^cj'jj/Vs, 

0<j<a 0<j<a 0<j<a 

fi= Y ^id'y'^ + Y ^^'^y^ + wttijy'ips. 

0<j<a 0<j<a 0<j<a 

By the assumption that B^^^ is a Grobner basis of /^(a) with respect to >s, we have for < j < a, 

S{di',i'y^') > 5s{ci'jy^z) > S{wci'jy^ips) 
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and for < J < a with j ^ i', 5{di'^i'y^ ) > S{di'jy^). Therefore with respect to >s-i, lt(5i') = lt((ij',j'y* ). By 
the same assumption, we have for < j < a with j ^ i, 

ds{ai^iy'z) > 5s{aijyh) > 6{waijy^ips) 

and for < j < a with j / i', 6s{ai^iy''z) > 6{bijy^) by the definition of i' in Q. Note that 

6siai^iy'z) > Sik^i^y'' + wai^iy'ips) (11) 

where the inequality is strict if and only if w = Wi by the definition of Wi in Q. 

From now on, all leading terms are with respect to >s-i- The inequality ( [TT] ) implies that if w = Wi, then 

lt(/i) = lt{ai^iy'-z) and if w / Wi, then lt(/j) = lt(6j,j'y*' + wai^iy'ips). 
First we consider the case that u)j = to. By ([8]l, 

lt(5iO = lt(g,0 = lt((ii^i-/), lt(/i) = \t{fi) = \i{ai,iy'z). (12) 

Next we consider the case that Wi ^ w and q > 0. Then we have Q. Note that 

and 

6xCi + 6{bi^i-y'' + wai^iy'ifs) = S^Ci + 5siai^iy'z) = S{di'^i'y'') 
where the second equality is from (|7]l, and 

lc(x 7i) = lc(6i,i'y + ii;ai,it/ (ps) = -fiiWi + mw = lc( ^ gi,). 
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Therefore, together with ( [TT] ), 

lt(/i) = lt(x"*ai,iy^z), \t{~gi,) = lt(/i) = lt(6i,i./ + wai^iy'^,). (13) 



For the case that Wi ^ w and q < 0, we have ( [T0| ). By repeating almost the same argument as above, we can show 
that 

\t{gi') = lt(d.',»'/), Hfi) = Hai^iv'z). (14) 

Finally it is clear that B generates the module I. From ( [T2] ), ([13]), and ( [T4] ), we see that is a Grobner basis of I 
with respect to >s-i, by the criterion in Proposition [T] □ 

Lemma 6. Let < i < a. If Wi ^ w, then 

Ss-i{9i') = Sidi'^i'y'') - 5xCi, Ss-i{fi) = 5s-i{ai^iy''z) + d^Ci. (15) 
Proof: Suppose w-i ^ w. Let us show the first equation. If a > 0, then 

6s-i{gi') = 6s-iifi) = S{bi,i'y'' + wai^iy'ips) = 5siai^iy'z) = S{di'^i'y'') - S^Ci, 

by ( [T3] ), ( [TT] ), and ([7]). If q < 0, then 6s-i{gi') = 6{di>^i'y^') by ( [T4j ). The second equation is clear by ( [T3] ) and 
([T4]). ' □ 



Proposition 7. For i with Wi / ujg, 

5{ei) - Sitti^iy') > SxCi and min{(5(ej) + s, 6{r]i,)} > 6{di'^i'y' ). 
Proof: Suppose Wi ^ oog- Then let us set w = ujg- Since Je{z — ujs^s — l^^'^^^^) C /^(s), we have 

In particular, ei{z — iJ,^'^~^^) € /. Note that with respect to >s-i, lt(ej(z — /U^*~^^)) = \t{eiz). As ^ is a Grobner 
basis of / with respect to >s^i, lt{eiz) must be an F[j;] -multiple of the leading term of fi. With ( [T5] ), this implies 
6{ai^iy') + 6r,Ci < 6{ei). Now by ([7]), 

6{ei) - 5{ai^iy') > d^ci > d^Ci = 5{di,^i.y^') - 5{ai^iy') - s. 
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Hence 5{ei) + s > 6{di'^i'y^'). □ 
Proposition 8. For i with Wi = ojg, 

min{(5(ei) + s,5{r]i,)] > 5{di- ^i-y''' ) - 6xCi 

Proof: Suppose Wi = ojs- Then let us choose tt; G F such that w / Wi. Since Je{z — ojsfs — /^t*-*^^-*) C Iy(s), 
we have 

Je{z - {Us - W)ips - M^"""^^) C I- 

In particular, ej(z — {ujs — w)(ps — n^^~^^) £ 1. Note that Ug — w ^ 0. With respect to >s-i, 

lt(ei{z - {ujs - w)ips - Ai^''""^^)) = lt((ws - w)enps) 

As S is a Grobner basis of / with respect to >s-i, lt((a;s — w)(-i^s) must be a scalar multiple of the leading term 
of Qi,. With ([T5]l, this implies 6{ei) + s > 5{di, ^i^y''') - b^Ci. Finally, 5(r/i') > 5{di' ^i'y'' ) > 6{di> ^I'y"-') - d^Ci. □ 

Proposition 9. The condition 

J2 max{<5(r/,0 - 5{y') - s, 5{e,) - 6{y')} > 24wt(e) 

0<i<a 

implies 

Proof: Propositions |7] and [8] imply 

5xCi> ^ (5((ii',j'y*') - min{(5(ei) + s,5(r/i')} 



> 6{di,^i'y'') -mm{6{ei) + s,6{'ni>)} 

0<i<a 

and 

Y XI ^{^i) - K^^hiVl < ^ S{ei) -S{ai^iy'). 

Now we have a chain of equivalent conditions 

Yj Hdi',i'y'') - min{5(ei) + s, > Yl ^'^^'^ ~ 

0<i<a 0<i<a 

Y ^{di-,i-y'')+ Y '5(ai,iy^) -min{5(ei) + s,(5(r/i')} > ^1 '^^^^ 

0<i<a 0<i<a 0<j<a 

^ Y (^ly*) +max{-5(ei) -s,-5(r/i0} > ^1 '^(^^) 

0<i<a 0<j<a 0<i<a 

^ 5] max{<5(r/,0-W-^,<^(e^) -%')}> J] 2(5(6,) - <5(y^)) 

0<j<a 0<i<a 

where we used the equality 

Y ^(di'^i'y'') + Y ^((^hivi = ^(duy') + Y 

0<i<a 0<i<a 0<i<a 0<i<a 

= Y i^id^,i) + + Y 

0<i<a 0<j<a 



6,n+ Y 

0<i<a 

Y - Kvi) + Y 2'5(y^) 

0<i<a 0<i<a 



0<i<a 0<i<o 
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shown by Lemma [2] and ([T]). Finally note that 

2{6{ei) - 5{y')) = J] 24deg,(e,) = 25,wt(e) 

0<i<a 0<i<a 

by Q. □ 
Proposition 10. Let 

""(^^^^ Yl max{5(7/,0 -(^(y') - s,0}. 

^ 0<i<a 

r/ze condition i/(s) > 2wt(e) implies 

Y Ci> Ci. 

Proof: We have 

J] max{5(r?i0 - - <5(e,) - > J] max{(5(r?,0 - - 0} 

0<i<a 0<«<a 

as <5(ei) - 5{y^) > for < i < a. □ 



S. Decoding Algorithm 

a) Initialization: Let = S{hy), and let B^^^ be the Grobner basis of ly with respect to >7v given in (|2]). 
The steps Pairing, Voting, Rebasing are iterated for s decreasing from N to 0. 

b) Pairing: Suppose B^''^ = {gl'\ f^'^ | < f < a} is a Grobner basis of with respect to >s where 

0<j<a 0<j<a 
0<j<a 0<j<a 

and let u^^^ = lc{di^i). For < i < a, there are unique integers < i' < 6x = a and ki satisfying 

5{ai^iy') + s = 5xki + 6yi . 
Note that the integer 6{ai^iy^) + s is a nongap if and only if ki > 0. Now let 

Ci = degxidi-^i-) - ki. 

c) Voting: If s > u or s is a gap, then for i with nongap 6{ai^iy^) + s, let 

Wi = -bi^i'[x'^'], Hi = l 

and for i with gap 6{ai^iy^) + s, let Wi = 0, /ij = 1. Let w = in both cases. 
If s < u and s is a nongap, then for each i, we let 

Wi = , Hi = lc(ai,i2/ y^s) 

and let q = maxjcj, 0}, and let w be the element of F with the largest 

Y 

'W=Wi 

and let Ws = w. 
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d) Rebasing: For each i, we do the following. If Wi = w, then let 



(s—1) (s) 

and let i^l, = i^^, . If Wi ^ w and q > 0, then let 



(s — l) r{s) / , \ 



and let u^f = Hi{w — Wi). \i Wi ^ w and Cj < 0, then let 

(s-i) (■5)/ , \ 



and let 4^"') = Let = {g^-^\ f^'''^ | < i < a}. 

e) Termination: After the iterations, output the recovered message (tD^j , Ws^, . . . ,Ws^)- 



(16) 



As-i) c As), , N fJ,i{w-Wi) (s), , , (17) 
fi ' = x^^ fy (z + wifs) '—j^. — '-gyiz + w^s) 



As-i) As)t , N ^ii{w-Wi) (s), , . (18) 

fi =fyiz + w^s) — —j^. — -X "'gyiz + w^s) 

y, 



C. Proof of the Algorithm 

Let us start with a brief overview of the algorithm. Note that the decoding algorithm is in one of two phases 
while s decreases from N to 0. The first phase is when s > u or s is a gap, and the second phase is when s < u 
and s is a nongap. Let v^^^ = v. In the first phase, the Grobner basis B^'^'> of /^(s) with respect to >s is updated 
such that B^'^^^^ is a Grobner basis of I^(s-i) with respect to >s-i where 

In the second phase, the algorithm determines Ws by majority voting and updates B^^^ such that B^'^^^^ is a Grobner 
basis of with respect to >s-i where 

= - ev{Ws(Ps)- 

When the algorithm terminates, Wg are determined for all nongaps s < u. 

Proposition 11. For N > s > 0, the set B^'^^ is a Grobner basis of y{s) with respect to >s. 

Proof: This is proved by induction on s. For s = N, this is true by (|2]). Now our induction assumption is that 
this is true for s. In the second phase, we already saw in Proposition [sj that B^'^^^^ is a Grobner basis of /^c^-i). 
So it remains to consider the first phase. The proof for this case is similar to that of Proposition |5] 
Suppose s > n or s is a gap. Let < i < a. Recall 

0<j<a 0<i<a 
0<j<a 0<j<a 

By the induction assumption, we have for < j < a, 

Sidi'^i'V'') > ds{ci>jyy) = 5{ci>jy^) + s 

and for < j < a with j ^ i', d{di>^i'y^') > 6{di'jy^). Therefore with respect to >s_i, lt{glf^) = lt{di'^i'y^'). 
Similarly, by the induction assumption, we have for < j < a with j ^ i, 6s{ai,iy^z) > 6s{aijy^z) and for 
<j <a with j / i', 5s{ai^iy'z) > 6{bijy^). 
Note that 

Ss{ai,^yy) > S{bi,i>y'') (19) 
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where the inequality is strict except when 6{ai^iy'^) + s is a nongap and bi^i'[x^'-] / 0. Note that wi = {) ii and only 
if 6{ai^iy^) + s is a gap or 6{ai0^) + s is a nongap but bi^i'[x^^] = 0. Therefore with respect to >s-i if Wi = 0, 
then lt'(/^')) = lt(a,,,y*z) and if Wi / 0, then lt(/f = \t[bi,i'y''). 
Now let us consider the case when Wi = 0, then by ([16]) and ([T9]l, 

with respect to >s-i- We consider the case when Wi / and Cj > 0. Then by ( [TT] ), 

(s-i) _ As) As-i) _ As) [Mm (s) 

yi' ~ h ^ Ji — h ^ (s) ili' ■ 



Note that 



and 



Ci5x + Sih^i'y' ) = Ci5x + 6{ai^iy''z) = 5{di>^i>y'''), 



Hx^'fh = lc(6,,/) = -^,w. = -lc(^5lf)). 



Together with this implies lt(/f'' = lt(x'''ai,iy'z). 
For the case when Wi ^ and q < 0, we have by ([T8]) 



yi' — yi' ^ Ji — Ji ~^ (s) ^ yi' ■ 

By the same argument as when q > 0, we can show that lt(/j'^'^ = lt(aj jy*z). 

Hence the set is again a Grobner basis of lyu-i) with respect to >s-i- □ 

Proposition 12. Let 

du = min{i^(s) | s G S*, s < u}. 
Then du > n — u. If 2wt(e) < du, then Wg = ojs for all s £ S,s < u. Hence 

Ws^s = 

s^S,s<u 

Proof: The bound du> n — u follows from 

"^^^^T max{(5(77iO -5,0} 

^ 0<i<a 



0<i<a 



r E ('J(r/.)-%^))-« = n-s. 



0<i<a 



If we suppose 2wt(e) < du, then Propositions 10 and 11 imply Wg = ujs for all s £ S, s < u. □ 



IV. Hermitian Codes 

A Hermitian curve H is a smooth plane curve defined with the equation y'^ + y = x'^^^ over Fq2. It has 
rational points Pi with a unique nonsingular point Poo at infinity. The functions x and y on H have poles at Poo 
of orders q and q + I, respectively. That is, 6x = q, Sy = q + 1. 

The ideal J associated with the sum of Pj is an F[a;] -module generated by 

r]i = y\x'^ — x), < i < q 
which form a Grobner basis of J with respect to >s. 
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Proposition 13. For nongap s < q^, 

^(•s) = {q — r){q^ + r — t) + r max{(;^ + r — q — t — 1,0} 
where s = tq + r, < r < q. 
Proof: Suppose 

S{y') +s = {q+l)i + s = aq + i'{q +1), < i' < q. 
Then 6{rii') = q^ + i'{q + 1). As i' = (s + i) mod q, 

q-l 



(5) = -J]max{,5(7?,0- W-s,0} 
1 

= -Y^ max{q^ + ((s + i) mod + 1) - (g + l)i - s, 0} 
1 

- max{q^ — qi + {{s + i) mod q)q — ((s + i) — (s + i) mod q), 0} 



9-1 

= max{g^ — z + (s + i) mod q — [_{s + i)/q\, 0}. 
i=0 

Now l&i s = tq + r, < t < q^ ,{)< r < q. Then 

g-i 

z^(s) = max{(7^ — f + (r + i) mod q — t — [{r + i)/q\,0} 
i=0 

q—l—r q—1 

= max{g^ — z + r + i — t, 0}+ max{g^ — i + r + i — q — t — 1,0} 

i=0 i=q—r 

= {q — r){q'^ + r — t) + r max{g^ + r — q — t — 1,0}. 



Proposition 14. For nongap u < q^, 

du = min{i/(s) | nongap s <u} 



q^-aq if h < a - {q^ - q), 
q^-u ifb>a-{q^-q), 



□ 



where u = aq + b, < b < q. 

Proof: For nongap s = tq + r, 

^(•s) = {q — r){q'^ + r — t) + r max{g^ + r — q — t — 1,0} 
= q^ — tq + r max{ — 1, t — q^ + q — r} > q^ — s. 

So we see that if a — q'^ + q — b > 0, that is, 6 < a — (g^ — q), then the minimum 

i^iaq) = q^ — aq 

is attained when s = aq, and hence du = q^ — aq. On the other hand, if b > a — {q"^ — q), then 

u{u) = q^ — aq — b = q^ — u 

is the minimum, and therefore du = q^ — u. □ 
It can be shown that the bound du exactly matches with the order bound on the minimum distance of Hermitian 
codes as given in |[T2l and |[T3l . Hence we may call du also an order bound. Figures [T] and |2] show the order bounds 
for Hermitian codes with q = 3 and q = 8, respectively. 
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Fig. 2. Order bound for Hermitian codes over 



Let Fg = F3(a) with — a — 1 = 0. We use the Hermitian curve over Fg defined by + y = x^, which has 
27 rational points 

(0, 0), (0, a^), (0, a^), (i, 2), (1, a), (1, q^), (2, 2), (2, a), (2, a^), (q, 1), (a, q^), (a, q^), (a^, 2), (a^, a), 
(a^, a^), {a^, 1), {a^ , a^), (a^, a^), (a^, 1), (a^, a^), {a^, a^), (a^, 1), (a^, a^), (a^, a^), (a^, 2), {a^, a), {a^, a^) 

to define the Hermitian code Cig, [27, 14, 11] linear code over Fg. 

Suppose that the sent codeword was corrupted during the transmission, and the received vector is 

V = (0, 0, 0, 0, 0, a^ 2, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, a^ 0, 0, a^, 0, 0, 2, 0). 

The six generators of the module 1^ are 



90 


9 

= X — X, 


91 


= y{x^ - x), 


92 


= y [x — X) 


fo 


— z hjy , 


fl 


= y{z - K), 


f2 


= y'^{z- hy) 



where 

= (a^x® + + a^x^ + a^x^ + a^x^ + a^x^ + 2x^ + a^x)y^ 
+ (a^x^ + x'^ + x^ + ax^ + a^x^ + a^x^ + a^x)y 
+ 2x^ + ax^ + a^x^ + 2x^ + a^x^ + x. 
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Note that N = 5{h^) = 32. Thus the initial basis for the code Cig is 





2 

y z 


yz 


z 


2 

y 


y 


1 
















9 1 
—1— • • • 

X • • • 


91 








9 1 

X + ■ ■ ■ 


9 1 
X + • 






92 














fo 






1 


a'^x^ H 


a^x^ + . 




x^ H 


fl 




1 




a^x® H 


a'^x^ + • 




a'^xi^ H 


f2 


1 






a^x^ H 


a^x^^ + • 




a^x^^ H 



which is a Grobner basis with respect to >32. In Pairing and Voting steps, the following data is computed: 

fi gi' Ci Wi 

^/o 92 1 
fl go -3 

/2 91 -3 

In Rebasing step, the pair /o,5'2 is modified by ( [TT] ) while the pairs /ij^o and /2,5i are modified by ( [T8| ). These 
modifications give the Grobner basis with respect to >3i. 





y^z 


yz 


z 


y' 


y 


1 
















9 1 
X + • • • 


91 










x^ + • 






92 








a^x^ H 


a^x^ + • 




x^ H 


fo 






X 


2x'^ H 


a^x^ + • 




9 1 

X + • • • 


fl 




1 




a'^x^ H 


a'^x^ + ■ 




2x^1 + • • • 


f2 


1 






a'^x* H 


2x^1 + • 




0^x12 



After similar iterations, we eventually reach to the Grobner basis with respect to >i6 for v, 





y'^z 


yz 


z 


y" 




1 


90 


















9 

X 


+ ... 


91 




x + 




cJ x^ + • 




2x^ + • • • 


x7 


+ ••• 


a'^x^ 


+ ... 


92 








x + - 




a^x''' H 


a^x^ 


+ ••• 


9 

X 


+ ... 


fo 






1 


x^ + • 














fl 




x^ + 




(x'x^ + • 




7 4 1 

a X + • • • 


c?x^ 


+ ••• 


7 X 

ax 


+ ... 


f2 


1 


a^x + 




oJ x^ + • 




cc'x'^ + • • • 


a^x^ 


+ ••• 


(T'X^ 


+ ... 



In Pairing and Voting steps, the following data is computed: 

fi 9i' Cj Wj 
fo 91 I 
fl 92 1 

Thus the value gets 2 votes, and the value gets 1 vote. So w is set to be 0, and this result is recorded in 
wiQ = 0. Then the pairs /o, gi and /i, g2 are modified by ([T6]l. The pair /2, (70 is modified by ( [TT] ). Then we get 
the Grobner basis with respect to >i5 for v^^^^ = v — ev(0 • x^y), 





y'^z 


yz 


z 


y" 


y 


1 


90 


1 


a'^x + 




a' x^ + • 




a'^x^ H 


OL^ X^ 


+ • 




ofix^ 


+ ••• 


91 




X + 




a'^x^ + • 




2x5 + • • • 


7 

X 


+ • 




7 K 

ax 


+ ••• 


92 








X + • 




o?x'^ H 


a^x^ 


+ • 




Q 

X 


+ ••• 


fo 






1 


x^ + • 
















fl 




x^ + 




a'x^ + • 




a X + • • • 


a^x^ 


+ • 




7 

ax 


+ ••• 


f2 


X + • • • 


a^x^ + 




a''x^ + • 




Q,3^5 _| 


7 7 
ax 


+ • 




a^x^ 


+ ••• 
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In Pairing and Voting steps, we obtain 



fi 9r 



a Wi 



h 
h 

f2 



90 
91 

92 



1 


1 









So wi^ = w = 0. All three pairs fo,9o, fi,9i, and /2,52 are modified by ([16]). Thus we get the Grobner basis 
with respect to >i4 for v^^^^ = v^^^^ — ev(0 • x^), 







yz 


z 




y 


1 


90 


1 


a'^x + 




a'x-^ + • 




a-^x^ H 


a^x^ + • 




(X'X^ 


+ ••• 


91 




X + 




a''x^ + • 




2x^ + • • • 


x'^ + • 




7 S 

ax 


+ ••• 


92 








X + • 




a^x'' H 


oc^x^ + • 




Q 

X 


+ ••• 


fo 






1 


x^ + • 














fi 




+ 




(x' x^ + • 




7 4 1 

a X + • • • 


a'^x^ + • 




a''x^ 


+ ••• 


f2 


X + ■ ■ ■ 


a^x^ + 




a''x^ + • 




a^x^ H 


7 7 

ax + • 




a^x* 


+ ••• 



Again Pairing and Voting steps result in 



fi 9i' 



Ci Wi 



fo 
fi 

f2 



92 

90 
91 



a 



Note that the value get 3 votes while the value get votes. Thus W13 = li; = is chosen. The pair fo,g2 is 
modified by ( [T6] ), and the pairs fi,go and §2,91 are modified by ( [T8| ). Thus the Grobner basis with respect to >i3 
for v^^^^ 



(14) 



ev(0 • X y ) is 





y'^z 


yz 


z 




y 


1 




1 


cfix + 




oJx^ H 


a'^x** H 


a'x^ + • 




ci^'x^ 


+ ••• 


91 




x + 




q'^x^ h 


2x5 + • • • 


x'^ + • 




(x' x^ 


+ ••• 


92 








X + • • • 


a^x*" H 


ot'x^ + • 




Q 

X 


+ ••• 


fo 






1 


x^ H 












fi 


1 


x^ + 




q''x^ H 












f2 


X + • • • 


o?x^ + 




a''x^ H 


x^ + . . . 


2x6 + • 




x^ 


+ ••• 



From the result 



fo 

fi 

f2 



9i' 
91 

92 

90 



Cj 

2 
2 




Wj 



2 



we set ^l;l2 = 0, and the Grobner basis with respect to >i2 for v 



(12) 



,(13) 



50 

91 

92 

fo 
fi 

f2 



y'^z 



x + 



yz 



ax + • • • 
X + • • • 



x^ H 

a^x^ H 



a'^x'^ + 
a^x^ + 
X + 
x^ + 
a'^x^ + 
a'^x^ + 



For every iteration from this point on, 



a^x^ H 

2x5 + • • • 

a^x^ H 



ev(0 • x^y) is 

y 



a'x^ + 
x^ + 
a^x^ + 



a^x^ + 
a'^x^ + 
X + 



(20) 



unanimously, and for the three gaps 5,2,1, there occurs no 



modifications. For brevity, we list only voting results: 







4 

X 








2 

xy 








2 

x^y 








x^ 














9i' 


Ci 


Wi 


fi 


9i' 


Ci 


Wi 


/. 


9i' 


Ci 


Wi 


/. 


9i' 


Ci 


Wi 


/. 


9i' 


Ci 


Wi 


fo 


90 


2 





fo 


92 


4 





fo 


91 


3 





fo 


90 


3 





fo 


92 


5 





fl 


91 


1 





fl 


90 


1 





fl 


92 


3 





fl 


91 


2 





fl 


90 


2 





f2 


92 


2 





f2 


91 


1 





f2 


90 


1 





f2 


92 


3 





f2 


91 


2 






15 



xy x'^ y X 1 

fi gi' Cj Wj fi Qi' Cj Wj fi Qi' Cj Wj fi gi' Cj Wj fi Qi' Cj Wj 

/o 51 4 /o 50 4 /o 51 5 /o 5o 5 /o 5o 6 

/i 52 4 /i 51 3 /i 52 5 /i 5i 4 /i 5i 5 

/2 50 2 /2 52 4 /2 50 3 /2 52 5 /2 52 6 

Thus ( |20| ), with no modifications, remains as a Grobner basis with respect to >-i. Hence the recovered message is 

{wq, 103, Wi, W6,W7, 'W8,Wq, Wiq, Wu,Wi2, W13, Wu, tflS, ^«16) = G F^"^ 

and the recovered codeword is the zero codeword. 



V. Final Remarks 

We presented a unique decoding algorithm based on interpolation. Like the syndrome decoding algorithm, our 
decoding algorithm corrects errors of up to half of the order bound. It computes the message directly from the 
received vector under evaluation encoding, which is a distinctive feature of list decoding. Like Kotter's algorithm 
for syndrome decoding, our decoding algorithm is amenable to a parallel hardware architecture. 

We would like to thank the anonymous referees for thoughtful comments that much improved the original paper. 
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